Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/848B7C827600EB0903D3D36F5E0B43264D8D30A33D7C3FBE6B9E843FAE2E0F55/0/323830333a613439303a3a2f33322d3332203d3e20323732383138.roa
File:                     323830333a613439303a3a2f33322d3332203d3e20323732383138.roa (raw, json)
Hash identifier:          BwSgWjUU5VBTR3KekAAqvivK/Msm6GVFWut3vcmNL1o=
Subject key identifier:   60:02:F4:56:5D:1E:74:F0:4E:32:55:3A:9D:70:2A:88:EC:2D:8C:26
Certificate issuer:       /CN=6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0
Certificate serial:       17D56CAA2C79E940503351FEDD341196043A8747
Authority key identifier: 6C:DB:97:C4:10:02:8B:5C:8A:FF:4E:3D:F7:96:0E:DB:73:30:E7:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/848B7C827600EB0903D3D36F5E0B43264D8D30A33D7C3FBE6B9E843FAE2E0F55/0/323830333a613439303a3a2f33322d3332203d3e20323732383138.roa
Signing time:             Tue 05 Mar 2024 17:41:16 +0000
ROA not before:           Tue 05 Mar 2024 17:36:16 +0000
ROA not after:            Tue 04 Mar 2025 17:41:16 +0000
asID:                     272818
IP address blocks:        2803:a490::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/848B7C827600EB0903D3D36F5E0B43264D8D30A33D7C3FBE6B9E843FAE2E0F55/0/6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/848B7C827600EB0903D3D36F5E0B43264D8D30A33D7C3FBE6B9E843FAE2E0F55/0/6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d5:6c:aa:2c:79:e9:40:50:33:51:fe:dd:34:11:96:04:3a:87:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0
        Validity
            Not Before: Mar  5 17:36:16 2024 GMT
            Not After : Mar  4 17:41:16 2025 GMT
        Subject: CN=6002F4565D1E74F04E32553A9D702A88EC2D8C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ee:2f:ef:47:a3:e3:6b:a2:4d:27:be:e1:e9:
                    1b:7b:39:52:af:4b:cb:a3:ff:66:39:7f:17:60:1e:
                    5b:3f:ee:e7:3a:c0:d8:3d:0f:5f:45:5a:27:53:7a:
                    24:09:24:b8:54:6b:86:c8:4c:c3:47:b8:d3:f2:29:
                    18:aa:52:05:6e:af:23:2f:e2:b3:83:22:f4:e9:85:
                    59:82:dc:62:98:c5:ea:55:81:10:59:e2:af:ba:57:
                    94:31:51:97:e6:00:8e:b3:ea:54:61:97:2e:0c:ce:
                    96:a5:db:68:0e:05:f5:f0:b7:b0:58:7e:e5:62:65:
                    5d:f4:24:da:c3:fd:25:70:ee:ae:5f:68:10:82:73:
                    1c:4c:69:51:96:96:69:57:2e:7b:a1:ef:1d:a1:21:
                    a7:d9:70:f5:42:40:ba:1e:bb:29:77:af:ce:ce:93:
                    52:0f:de:e5:fd:ae:95:93:b3:f1:1c:2e:88:29:76:
                    15:d0:3c:00:be:46:ed:46:1f:ed:69:97:76:69:56:
                    87:20:0d:8c:9e:90:87:e0:3a:ce:08:ce:b5:01:63:
                    94:47:1a:73:2e:eb:0c:09:d3:3d:15:3c:0c:d1:85:
                    03:cc:2b:54:ff:8a:45:79:d4:ec:fa:fc:f4:19:ab:
                    60:70:06:7f:18:b0:61:94:44:15:fb:74:8e:04:d2:
                    70:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:02:F4:56:5D:1E:74:F0:4E:32:55:3A:9D:70:2A:88:EC:2D:8C:26
            X509v3 Authority Key Identifier:
                keyid:6C:DB:97:C4:10:02:8B:5C:8A:FF:4E:3D:F7:96:0E:DB:73:30:E7:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/848B7C827600EB0903D3D36F5E0B43264D8D30A33D7C3FBE6B9E843FAE2E0F55/0/6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/848B7C827600EB0903D3D36F5E0B43264D8D30A33D7C3FBE6B9E843FAE2E0F55/0/323830333a613439303a3a2f33322d3332203d3e20323732383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a490::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:14:91:0d:58:9e:e7:b9:d7:be:e8:d7:4a:14:57:17:bb:2d:
         df:4c:b7:53:f9:3e:51:06:e4:f0:3d:b8:9f:c3:95:a7:7a:7d:
         13:3b:47:b3:08:20:e4:f9:d7:26:c2:8c:cf:dc:ad:25:08:32:
         c5:f9:76:fc:9f:34:f5:32:84:29:da:ca:b2:d8:e9:f4:d2:15:
         3e:7c:e6:66:df:b8:5b:e1:08:24:9c:a7:cd:1e:58:43:60:0f:
         fe:31:e9:67:84:ff:62:33:e5:3a:f1:c2:57:6d:ee:27:7f:5d:
         a0:6a:94:5d:50:c9:c5:4d:29:28:34:53:2b:d1:1a:56:40:b1:
         8c:54:aa:e1:39:e3:6d:f3:13:72:1c:7e:33:10:fc:f2:96:b5:
         f5:40:d7:3a:6a:30:c2:30:75:e0:30:e8:bf:6d:6d:41:3e:f1:
         15:f6:40:89:65:e9:12:72:ae:a4:19:25:10:bd:f2:31:66:c8:
         80:32:e9:f1:65:04:d4:25:72:23:ed:21:5d:50:fc:9a:90:58:
         b5:d0:b4:6d:92:d5:8b:41:4d:42:d3:0d:33:80:94:d0:03:d0:
         6f:65:bd:71:07:9e:01:c4:f1:e4:de:f3:67:69:38:00:a1:09:
         b5:8b:0f:a8:03:1e:55:50:02:b7:9f:77:19:64:1a:53:e5:cc:
         9b:17:4b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:23:43 2024 by rpki-client on console-fra.rpki-client.org